$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa File: b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa (raw, json) Hash identifier: mbKjkFbHj9oN8Hy/boNpmH+4Z9i+vM+ITCZ91tAmpFk= Subject key identifier: A6:5C:1C:11:A7:C0:90:F4:87:6B:8B:47:84:40:E9:C6:46:E5:AB:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832A91C9B01E04FC2E1CC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:2a:91:c9:b0:1e:04:fc:2e:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6e37dbb4-03b2-436b-ba26-ab4383412643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b5:36:dd:b8:59:7d:25:d2:a6:f8:32:bb:fd: 77:52:7b:96:9c:49:76:ab:85:8b:d1:3c:f3:8a:10: a5:f2:9a:03:2c:2e:83:dd:d5:03:54:9d:4c:5c:ee: c7:b5:5d:96:f3:df:48:72:2b:2a:01:e2:b9:ae:56: 63:33:d4:76:ba:80:ea:59:82:2b:55:20:ab:15:35: 53:59:68:0c:14:43:e5:cb:39:3b:06:ce:27:8e:37: 5e:8a:b6:6a:88:8d:09:e7:02:5c:6f:18:84:0e:1a: b1:ef:6a:dd:9f:02:ee:a0:17:73:39:88:44:c3:9e: 69:80:16:60:17:2c:b4:52:c5:cf:c2:11:71:56:b4: 85:81:da:e4:6a:3f:b8:de:d6:ec:e8:0b:71:4a:3b: 35:a8:6b:20:8e:b5:ff:81:e6:91:f7:89:1c:f5:c2: e7:e1:a2:b3:94:b8:fc:a9:b3:90:17:c0:24:12:73: 79:5c:80:1f:96:46:50:8c:d4:d8:8f:2f:26:2f:dd: da:78:36:d6:f8:f7:b7:7b:a8:ca:50:18:4d:ff:8d: 46:c6:3d:1c:6e:c7:e8:07:14:8d:c3:18:43:85:35: 74:b2:56:0e:82:08:4b:4f:ec:25:fd:5f:88:c7:93: 24:d3:d2:b4:f8:ad:2a:af:d4:2d:28:b5:7f:68:e0: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5C:1C:11:A7:C0:90:F4:87:6B:8B:47:84:40:E9:C6:46:E5:AB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:27:5d:7d:1b:05:4d:13:8a:9a:22:c7:ae:1e:70:61:d5:0b: 4e:4a:1d:a5:29:06:98:7b:23:af:6d:cb:38:ec:91:c4:5a:7c: 8a:9d:4d:c4:53:be:00:97:ac:06:13:31:c0:b0:ce:86:34:cf: 16:4e:de:e8:70:ed:d0:53:1b:71:26:9c:70:57:e3:83:ae:83: 00:9c:fa:83:6b:ff:99:6a:06:f9:2d:d0:d9:af:87:9a:d0:c8: dd:03:d4:7d:7c:2f:4c:1d:10:3e:0b:8f:2a:70:21:0a:ae:4e: 61:8a:4f:19:c6:f8:e6:5c:d6:48:4b:78:dc:b1:e6:f3:b5:b1: 08:9c:50:08:2b:87:36:d7:27:9a:05:1f:6a:52:ac:4a:d6:fa: 83:43:17:c9:bf:7f:84:19:83:18:69:b4:1b:12:b2:a9:2b:c0: 43:61:ec:09:8f:07:78:83:31:f0:f9:f6:09:5a:b5:5f:ef:bf: b3:df:04:4a:70:3f:12:c3:d6:b1:70:f9:f7:59:7c:5e:1a:92: a1:01:f2:eb:9a:42:30:40:90:bf:37:0b:a6:ce:f0:5a:c9:c3: ef:41:38:84:83:d9:ff:dc:de:5f:aa:be:be:be:41:51:02:8f: ea:e0:d0:3c:df:cc:12:f3:99:98:b5:55:94:fc:c9:b1:c5:2b: 52:b2:f9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyqRybAeBPwuHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmUzN2RiYjQtMDNiMi00MzZiLWJhMjYtYWI0MzgzNDEyNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7U23bhZfSXSpvgyu/13UnuWnEl2q4WL0Tzz ihCl8poDLC6D3dUDVJ1MXO7HtV2W899IcisqAeK5rlZjM9R2uoDqWYIrVSCrFTVT WWgMFEPlyzk7Bs4njjdeirZqiI0J5wJcbxiEDhqx72rdnwLuoBdzOYhEw55pgBZg Fyy0UsXPwhFxVrSFgdrkaj+43tbs6AtxSjs1qGsgjrX/geaR94kc9cLn4aKzlLj8 qbOQF8AkEnN5XIAflkZQjNTYjy8mL93aeDbW+Pe3e6jKUBhN/41Gxj0cbsfoBxSN wxhDhTV0slYOgghLT+wl/V+Ix5Mk09K0+K0qr9QtKLV/aOCbeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZcHBGnwJD0h2uLR4RA6cZG5audMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjQxNDllNGEtM2ZmMS0z YzNiLWE4MTItMDg4NGJkNWE0ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHknXX0bBU0Tipoix64ecGHVC05KHaUpBph7I69tyzjskcRafIqdTcRT vgCXrAYTMcCwzoY0zxZO3uhw7dBTG3EmnHBX44OugwCc+oNr/5lqBvkt0Nmvh5rQ yN0D1H18L0wdED4LjypwIQquTmGKTxnG+OZc1khLeNyx5vO1sQicUAgrhzbXJ5oF H2pSrErW+oNDF8m/f4QZgxhptBsSsqkrwENh7AmPB3iDMfD59glatV/vv7PfBEpw PxLD1rFw+fdZfF4akqEB8uuaQjBAkL83C6bO8FrJw+9BOISD2f/c3l+qvr6+QVEC j+rg0DzfzBLzmZi1VZT8ybHFK1Ky+RU= -----END CERTIFICATE-----Generated at Fri Sep 25 08:40:13 2026 by rpki-client